General

  • Target

    2024-05-25_f39a29b5cdd4e15d65a43590b4fcc082_bkransomware_gandcrab_karagany

  • Size

    155KB

  • MD5

    f39a29b5cdd4e15d65a43590b4fcc082

  • SHA1

    e3be416562c4e609bc8d514f6e337c6f581e0687

  • SHA256

    7d2d4ea3c68a2af1d6a6980efd519727a33fb1866fffad89e1c78577c46955e1

  • SHA512

    d4437ece329650e67319048d536e06699667c9e415290e6e42a04b0918761780be7b9331180a5287746bb476204100793c53b39eeab57ca6229f1f74c467b1dc

  • SSDEEP

    3072:l5K/B0toLQSNJQlZHQsozTS+SMqqDL2/TrKvJG:lcytwtc1yTS+xqqDL6HK8

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-25_f39a29b5cdd4e15d65a43590b4fcc082_bkransomware_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    7848011b763d00cd02658995847dd30b


    Headers

    Imports

    Sections